libreoffice:ww8fuzzer: Bad-cast to SwNode from invalid vptr in SwTable::GetTableNode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5763417609404416 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address: 0x56da15dd1e...

vlc:vlc-demux-dec-libfuzzer: Bad-cast to asf_object_t' (aka 'union asf_object_u')ASF_ReadObjectRoot in DemuxInit

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=4848924012380160 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerubsanvlc Platform Id: linux Crash Type: Bad-cast Crash Address: 0x574be2747f00 Crash Stat...

libaom:av1_enc_fuzzer: Bad-cast to PixelLevelGradientInfocompute_gradient_info_sb in av1_encode_sb_row

Detailed Report: https://oss-fuzz.com/testcase?key=4504396785057792 Project: libaom Fuzzing Engine: libFuzzer Fuzz Target: av1encfuzzer Job Type: libfuzzerubsanlibaom Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000000000104 Crash State: Bad-cast to...

hobbes:fuzz-type-decode: Bad-cast to hobbes::Primitive from hobbes::Switch in std::_Rb_tree<std::shared_ptr<hobbes::Primitive>, std::shared_ptr<hobbes::Primit

Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=6297348518248448 Project: hobbes Fuzzing Engine: libFuzzer Fuzz Target: fuzz-type-decode Job Type: libfuzzerubsanhobbes Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5c819dfe81e0 Cra...

ogre:script_fuzz: Bad-cast to ObjectAbstractNode from Ogre::PropertyAbstractNode in Ogre::ObjectAbstractNode::getVariable

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=6068974773927936 Project: ogre Fuzzing Engine: libFuzzer Fuzz Target: scriptfuzz Job Type: libfuzzerubsanogre Platform Id: linux Crash Type: Bad-cast Crash Address: 0x59171ec6b4a0 Crash State: Bad-cas...

OSV-2026-963 Bad-cast to Ogre::HardwareBuffer from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=526758819 Crash type: Bad-cast Crash state: Bad-cast to Ogre::HardwareBuffer from invalid vptr Ogre::HardwareBuffer::unlockImpl Ogre::HardwareBuffer::unlock...

PT-2026-55665

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=526758819 Crash type: Bad-cast Crash state: Bad-cast to Ogre::HardwareBuffer from invalid vptr Ogre::HardwareBuffer::unlockImpl Ogre::HardwareBuffer::unlock...

ogre:ogre_deep_fuzz: Bad-cast to Ogre::HardwareBuffer from invalid vptr in Ogre::HardwareBuffer::unlockImpl

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=4746296653840384 Project: ogre Fuzzing Engine: libFuzzer Fuzz Target: ogredeepfuzz Job Type: libfuzzerubsanogre Platform Id: linux Crash Type: Bad-cast Crash Address: 0x564a90764e30 Crash State:...

OSV-2026-867 Bad-cast to std::__shared_weak_count from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=520147546 Crash type: Bad-cast Crash state: Bad-cast to std::sharedweakcount from invalid vptr std::1::sharedptr::sharedptr Assimp::STEP::ReadFileHeader...

PT-2026-86157

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=520147546 Crash type: Bad-cast Crash state: Bad-cast to std:: shared weak count from invalid vptr std:: 1::shared ptr::shared ptr Assimp::STEP::ReadFileHeader...

assimp:assimp_fuzzer_ifc: Bad-cast to std::__shared_weak_count from invalid vptr in std::__1::shared_ptr<Assimp::STEP::EXPRESS::DataType const>::shared_ptr

Detailed Report: https://oss-fuzz.com/testcase?key=4579058511052800 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzerifc Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5615beca3bf0 Crash State: Bad-cast to std::sharedweakcount from invali...

CVE-2026-11077

Bad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11077

Bad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11077

A bad cast or incorrect conversion in the Dawn component of Google Chrome (prior to version 149.0.7827.53) and Microsoft Edge allows a remote attacker to execute arbitrary code inside a sandbox. The vulnerability can be triggered by a specially crafted HTML page and may also result in a buffer ov...

jsoncons:fuzz_cbor_encoder: Bad-cast to jsoncons::cbor::cbor_mdarray_row_major_iterator<jsoncons::stream_source<unsigned char>, std::allocator<char>> from invalid vptr in jsoncons::cbor::cbor_mdarray_row_major_iterator<jsoncons::stream_source<unsigned

Project: https://github.com/danielaparker/jsoncons.git Detailed Report: https://oss-fuzz.com/testcase?key=4549385555083264 Project: jsoncons Fuzzing Engine: libFuzzer Fuzz Target: fuzzcborencoder Job Type: libfuzzerubsanjsoncons Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5b1f102138e...

OSV-2026-846 Bad-cast to AMFColor from AMFMetadata

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=519360629 Crash type: Bad-cast Crash state: Bad-cast to AMFColor from AMFMetadata Assimp::AMFImporter::SPPMaterial::GetColor Assimp::AMFImporter::PostprocessBuildMeshSet...

PT-2026-52533

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=519360629 Crash type: Bad-cast Crash state: Bad-cast to AMFColor from AMFMetadata Assimp::AMFImporter::SPP Material::GetColor Assimp::AMFImporter::Postprocess BuildMeshSet...

assimp:assimp_fuzzer_amf: Bad-cast to AMFColor from AMFMetadata in Assimp::AMFImporter::SPP_Material::GetColor

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6146448743006208 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzeramf Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x58923e6c3d90 Crash State...

libreoffice:schtmlfuzzer: Bad-cast to ScExternalDoubleRefToken from ScExternalSingleRefToken in extendRangeReference

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5606773552906240 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: schtmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address:...

libreoffice:ww8fuzzer: Bad-cast to SwNode from invalid vptr in SwTable::GetTableNode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4794297491980288 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5886cc610e...